Implement PMEM-WP-0015 credentialed live pilot with ops-warden routing.

Add credential routing advisories via warden route/access, live pilot evidence
helpers, managed deployment pilot probes, evaluation trend regression gates,
and expanded troubleshooting. Update operator runbook and maturity scorecard.

tests/fixtures/memory-graph-cli-lifecycle.json

@@ -0,0 +1,56 @@
+{
+  "schema_version": "markitect.memory.graph.v1",
+  "id": "phase-memory-cli-lifecycle-graph",
+  "nodes": [
+    {
+      "id": "decision.boundary",
+      "kind": "decision",
+      "text": "Markitect owns syntax contracts; phase-memory owns runtime phase planning.",
+      "phase": "stabilized",
+      "source_spans": [{"path": "docs/architecture.md", "line_start": 1}],
+      "metadata": {"title": "Boundary decision"}
+    },
+    {
+      "id": "event.restart",
+      "kind": "episode",
+      "text": "Restart package should include boundary decision and active graph neighborhood.",
+      "phase": "fluid",
+      "freshness": {"updated_at": "2026-06-20T00:00:00+00:00", "source_digest": "old"}
+    },
+    {
+      "id": "artifact.profile",
+      "kind": "artifact",
+      "text": "Memory profile declares budgets, stores, retention, activation, policy, and fallback behavior.",
+      "phase": "stabilized",
+      "freshness": {"updated_at": "2026-06-28T00:00:00+00:00", "source_digest": "fresh"}
+    },
+    {
+      "id": "risk.durable-write",
+      "kind": "risk",
+      "text": "Durable writes must stay review gated until the runtime plan is explicit.",
+      "phase": "fluid"
+    }
+  ],
+  "edges": [
+    {
+      "id": "edge.boundary-profile",
+      "kind": "governs",
+      "source": "decision.boundary",
+      "target": "artifact.profile"
+    },
+    {
+      "id": "edge.risk-boundary",
+      "kind": "depends_on",
+      "source": "risk.durable-write",
+      "target": "decision.boundary"
+    }
+  ],
+  "events": [
+    {
+      "id": "event.activation",
+      "kind": "activated",
+      "timestamp": "2026-06-28T00:00:00+00:00",
+      "activation_refs": ["activation.fixture"]
+    }
+  ]
+}

tests/fixtures/public-api-snapshot.json

@@ -9,10 +9,12 @@
     "CREDENTIALED_DRILL_SCHEMA",
     "CREDENTIALED_OPERATOR_REPORT_SCHEMA",
     "CREDENTIALED_TELEMETRY_DRILL_SCHEMA",
+    "CREDENTIAL_ROUTING_ADVISORY_SCHEMA",
     "CredentialedDrillConfig",
     "Diagnostic",
     "EVALUATION_REPORT_SCHEMA",
     "EVALUATION_TREND_HISTORY_SCHEMA",
+    "EVALUATION_TREND_REGRESSION_GATE_SCHEMA",
     "EVALUATION_TREND_SCHEMA",
     "ExternalAdapterPack",
     "FakeExternalEventLog",
@@ -22,6 +24,7 @@
     "FakeKontextualRuntimeRegistry",
     "FakeMarkitectPackageCompiler",
     "FakeTelemetryAuditSink",
+    "LIVE_PILOT_REPORT_SCHEMA",
     "LifecycleAction",
     "LifecycleActionKind",
     "LifecycleRuleConfig",
@@ -35,6 +38,7 @@
     "LiveShapedTelemetryAuditSink",
     "LocalMarkitectValidator",
     "LocalServiceRunner",
+    "MANAGED_DEPLOYMENT_PILOT_SCHEMA",
     "MANAGED_DEPLOYMENT_SCHEMA",
     "MANAGED_DEPLOYMENT_VALIDATION_SCHEMA",
     "MARKITECT_PACKAGE_REQUEST_SCHEMA",
@@ -49,6 +53,7 @@
     "MemoryPathState",
     "MemoryPhase",
     "OptionalMarkitectValidator",
+    "PHASE_MEMORY_CREDENTIAL_NEEDS",
     "POLICY_OPERATION_POINTS",
     "PhaseMemoryRuntime",
     "PhaseTransitionRule",
@@ -68,6 +73,8 @@
     "ServiceResponse",
     "TROUBLESHOOTING_MATRIX_SCHEMA",
     "TROUBLESHOOTING_REQUIRED_CATEGORIES",
+    "WARDEN_ACCESS_NEED",
+    "WARDEN_ROUTE_FIND_QUERY",
     "WordCountTokenEstimator",
     "abandon_path",
     "activation_quality_report",
@@ -84,14 +91,17 @@
     "evaluation_threshold_report",
     "evaluation_trend_artifact",
     "evaluation_trend_history",
+    "evaluation_trend_regression_gate",
     "fake_external_adapter_pack",
     "fake_external_runtime_config",
     "graph_from_markitect",
     "health_report",
+    "live_pilot_report",
     "live_shaped_adapter_pack",
     "load_evaluation_trend_history",
     "make_review_record",
     "managed_deployment_manifest",
+    "managed_deployment_pilot_report",
     "merge_path",
     "missing_credentialed_adapter_env",
     "operator_troubleshooting_matrix",
@@ -109,6 +119,7 @@
     "plan_retention",
     "plan_retention_from_rules",
     "profile_from_markitect",
+    "resolve_credentialed_environ",
     "resolve_runtime_adapters",
     "retrieve_graph_neighborhood",
     "runtime_from_config",
@@ -119,8 +130,13 @@
     "validate_adapter_pack_manifest",
     "validate_managed_deployment_manifest",
     "validate_operator_troubleshooting_matrix",
+    "warden_access_advisory",
+    "warden_cli_available",
+    "warden_credential_routing_advisory",
+    "warden_route_find",
     "write_credentialed_operator_report",
-    "write_evaluation_trend_history"
+    "write_evaluation_trend_history",
+    "write_live_pilot_evidence"
   ],
   "service_operations": [
     "audit.query",